This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer (raw, json) Hash identifier: hOYwGv5TyfXb+GI7IG4AcjF5hsFEDVrMV1ahGjo6s5Q= Subject key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9EB9C7AF6BC19B4CB4F224E2539EC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201481 IP: 185.79.180.0/22 IP: 2a03:5520::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:eb:9c:7a:f6:bc:19:b4:cb:4f:22:4e:25:39:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:25:e2:c1:52:93:e5:82:bb:82:12:02:99:65: 60:dd:9f:94:20:83:d9:26:b5:3d:67:7e:f3:e0:e2: 7a:25:76:11:bb:16:22:fc:b1:68:31:13:a6:72:14: 10:1f:e5:7c:f3:5e:eb:9b:02:8b:f3:1e:d5:18:74: 35:2b:40:69:3c:13:b7:5c:78:73:04:ff:3d:46:6a: ba:38:20:31:37:dc:c9:72:8e:ef:b5:d0:5c:fb:80: c7:00:76:85:d5:dc:55:60:f9:58:60:cb:92:03:94: 97:7b:60:c9:62:88:4d:88:e3:4c:71:7b:5b:a3:5c: 81:2c:1b:7b:9a:52:1d:91:88:b5:97:1a:1b:d4:29: a2:93:22:fc:18:4b:5f:32:d8:22:8e:bf:43:9d:30: 77:38:d5:04:dc:50:30:07:c8:0d:99:87:f3:9d:6e: cf:b4:8a:a5:e2:bf:96:b2:4a:ec:ea:7c:34:8c:a2: ee:a9:e8:9f:9b:2a:a5:32:2d:60:e9:68:b5:12:dc: af:02:2f:6b:bf:3f:b5:41:80:92:93:e8:ea:38:6a: fc:7e:3c:aa:42:f2:1f:d6:dd:17:9f:0d:b8:91:ba: 40:dd:8a:f3:37:80:59:25:e5:a5:e6:98:b8:5f:1d: d6:76:a1:0e:a0:b2:17:65:d9:1e:ce:ca:ef:64:2d: 46:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.180.0/22 IPv6: 2a03:5520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201481 Signature Algorithm: sha256WithRSAEncryption 01:7c:36:18:fd:36:48:52:e5:75:13:e6:d3:e9:ce:a7:03:8e: 7d:40:83:16:cb:2e:e0:59:fa:67:cd:c8:63:e2:c9:86:25:ac: 43:8d:8b:2f:33:18:e8:1f:e5:05:84:ce:96:e1:bb:79:eb:9d: c9:3d:ac:de:75:3e:20:d3:e3:dd:2b:20:10:86:c5:0d:e5:90: d5:7a:6e:3a:c3:0f:3c:b4:1c:f8:ff:dc:4a:0b:bb:2f:4c:73: 80:41:0f:0f:da:58:fb:1e:8a:2a:a4:ef:17:2f:a6:9a:60:e1: 8f:97:71:85:d5:b3:ff:1e:dd:eb:8e:86:4f:4b:6d:dd:58:de: 12:2e:5a:f0:c9:28:0e:e7:27:f0:a5:fb:e4:1c:8b:59:8f:ca: 3e:8a:03:4e:c5:8f:85:fd:d8:a3:b8:b6:b6:a9:08:60:4e:a1: 37:84:ac:fe:b5:f2:3c:3b:d5:5c:3a:31:56:3e:63:2e:ea:c5: 13:b9:f3:62:fa:06:c3:aa:85:22:3e:35:f3:82:1f:e2:07:b2: cd:dc:57:f5:e8:51:23:c5:04:a2:66:c1:ba:3e:9d:cb:eb:5f: 86:82:18:15:4d:04:2e:5b:bf:c1:55:6d:15:8e:ca:63:83:1a: 1e:c2:94:3a:5f:3a:26:0b:d6:33:84:1e:fc:62:13:7d:8a:ad: 7f:85:e5:15 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yeuceva8GbTLTyJOJTnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjRlZThkMmEzNzBkMjNlMjQxMWJkNGFlMzlmZjM0YTlkM2YwZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SXiwVKT5YK7ghICmWVg3Z+UIIPZ JrU9Z37z4OJ6JXYRuxYi/LFoMROmchQQH+V8817rmwKL8x7VGHQ1K0BpPBO3XHhz BP89Rmq6OCAxN9zJco7vtdBc+4DHAHaF1dxVYPlYYMuSA5SXe2DJYohNiONMcXtb o1yBLBt7mlIdkYi1lxob1CmikyL8GEtfMtgijr9DnTB3ONUE3FAwB8gNmYfznW7P tIql4r+Wskrs6nw0jKLuqeifmyqlMi1g6Wi1EtyvAi9rvz+1QYCSk+jqOGr8fjyq QvIf1t0Xnw24kbpA3YrzN4BZJeWl5pi4Xx3WdqEOoLIXZdkezsrvZC1GnQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCZO6NKjcNI+JBG9SuOf80qdPw/uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzcwZTM0 MS00NTY2LTQ1ZGEtODI3My1mNTUxYjFhMDQ2MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvNzBlMzQx LTQ1NjYtNDVkYS04MjczLWY1NTFiMWEwNDYyYy8xL0prN28wcU53MGo0a0ViMUs0 NV96U3AwX0QtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuU+0MA0EAgACMAcDBQAqA1UgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTCTANBgkqhkiG9w0BAQsFAAOCAQEAAXw2GP02SFLl dRPm0+nOpwOOfUCDFssu4Fn6Z83IY+LJhiWsQ42LLzMY6B/lBYTOluG7eeudyT2s 3nU+INPj3SsgEIbFDeWQ1XpuOsMPPLQc+P/cSgu7L0xzgEEPD9pY+x6KKqTvFy+m mmDhj5dxhdWz/x7d646GT0tt3VjeEi5a8MkoDucn8KX75ByLWY/KPooDTsWPhf3Y o7i2tqkIYE6hN4Ss/rXyPDvVXDoxVj5jLurFE7nzYvoGw6qFIj4184If4geyzdxX 9ehRI8UEombBuj6dy+tfhoIYFU0ELlu/wVVtFY7KY4MaHsKUOl86JgvWM4Qe/GIT fYqtf4XlFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:15 2026 by rpki-client